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TN THE CLAIMS : 

Amended claims follow. 

1 . (Currently Amended) A method for scanning data utilizing multiple scanning 
engines, comprising: 

(a) generating a request for data to be scanned for viruses utilizing a scanning 
interface; 

(b) sending the request to scan data to a plurality of scanning engines utilizing an 
engine interface application control module coupled between the scanning 
interface and the scanning engines, the request being adapted for prompting 
the scanning engines to scan the data and respond with events upon locating 
a virus; 

(c) receiving the events utiUzing an event processor module coupled to the 
scanning engines and the engine interface application control module for 
processing the events; and 

(d) transmitting the processed events to the engine interface application control 
module for being monitored by the scanning interface; 

wherein the engine interfa ce ap plication control module translates the 
requests and events for each of the scannin g engines; 

wherein the scanning engines are unique prop rietary scanning engines each 
associated with a different vendor; 

wherein the re q uests and events for each of the scanning engines are in a 
format different from formats of the other s canning engines. 

2. (Original) The method as recited in claim 1, wherein the engine interface 
application control module and the event processor module reside on a 
gateway. 

3. (Original) The method as recited in claim 2, wherein the scanning interface 
automatically generates the request in response to the receipt of data at the 
gateway. 



PAGE 5/16 " RCVD AT 8/3i;2004 7:00:51 PM [Eastern Daylight Time] - SVR:USPTO^FXRF.1/2 - DNIS:8729306 ^ CS1D:408 971 4660 - DURATION (mm^s):04-54 



Rug 31 04 03:0ap SVIPG 408 971 4GG0 p.G 



4. (Original) The method as recited in claim I , wherein the scanning interface 
includes a graphical user interface for allowing a user to manually generate 
the request. 

5. (Cancelled) 

6. (Original) The method as recited in claim 1, wherein the event processor 
module translates the events from each of the scanning engines into a single 
format. 

7. (Original) The method as recited in claim 6, wherein the translated events are 
transmitted to the scanning interface for outputting the event, 

8. (Cancelled) 

9. (Original) The method as recited in claim 1 , wherein the scanning engines 
are incompatible scanning engines. 

1 0. (Currently Amended) A computer program product for scanning data 
utilizing multiple scanning engines, comprising: 

(a) computer code for generating a request for data to be scanned for viruses 
utilizing a scanning interface; 

(b) computer code for sending the request to scan data to a plurality of scanning 
engines utilizing an engine interface application control module coupled 
between the scanning interface and the sc arming engines, the request being 
adapted for prompting the scanning engines to scan the data and respond 
with events upon locating a virus; 

(c) computer code for receiving the events utilizing an event processor module 
coupled to the scanning engines and the engine interface application control 
module for processing the events; and 

(d) computer code for transmitting the processed events to the engine interface 
application control module for being monitored by the scanning interface; 

-3- 
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wherein the engine interface application control module translates the 
requests and events for each of the scanning engines: 

wherein the scanning engines are unique proprietary scanning engines each 
associated with a different vendor: 

wherein the requests and events for each of the scanning engines are in a 
format different from formats of the other scanning engines . 

1 1 . (Original) The computer program product as recited in claim 10, wherein the 
engine interface application control module and the event processor module 
reside on a gateway. 

12. (Original) The computer program product as recited in claim 1 1 , wherein the 
scanning interface automatically generates the request in response to the 
receipt of data at the gateway. 

13. (Original) The computer program product as recited in claim 10, wherein the 
scanning interface includes a graphical user interface for allowing a user to 
manually generate the request. 

14. (Cancelled) 

15. (Original) The computer program product as recited in claim 10, wherein the 
event processor module translates the events from each of the scanning 
engines into a single format. 

16. (Original) The computer program product as recited in claim 15> wherein the 
translated events are transmitted to the scanning interface for outputting the 
event. 

17. (Cancelled) 

1 8. (Original) The computer program product as recited in claim 10, wherein the 
scanning engines are incompatible scanning engines. 

-4- 
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1 9. (Original) The computer program product as recited in claim 1 0, wherein the 
events include the identification of at least one of unwanted content, viruses 
and malicious code. 

20. (Currently Amended) A system for scanning data utilizing multiple scanning 
engines, comprising: 

(a) a scanning interface for generating a request for data to be scanned for 
viruses; 

(b) an engine interface application control module coupled between the scanning 
interface and a plurality of scanning engines for sending the request to scan 
data to the scanning engines, the request being adapted for prompting the 
scanning engines to scan the data and respond with events upon locating a 
virus; and 

(c) an event processor module coupled to the scanning engines and the engine 
interface application contiol module for receiving the events and processing 
the events; 

^d) wherein the processed events are outputted by the scanning interface! 

wherein the engine interface application control module translates the 
requests and events for each of the scanning engines; 

wherein the scanning engines are unique proprietary scanning engines each 
associated with a different vendor; 

wherein the requests and events for each of the scanning engines are in a 
format different from formats of the other scanning engines . 

2 1 . (Currently Amended) A method for scanning data utilizing multiple scanning 
engines, comprising: 

(a) means for generating a request for data to be scanned for viruses; 

(b) means for sending the request to scan data to the scanning engines, the 
requests being adapted for prompting the scanning engines to scan the data 
and respond with events upon locating a virus; and 

(c) means for receiving the events and processing the events^ 
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wherein the requests and events are translated for each of the scanning 
engines; 

wherein the scanning engines are unique proprietary scanning engines each 
associated with a different vendor: 

wherein the requests and events for each of the scanning engines are in a 
format different from formats of the other scanning engines . 

22, (Currently Amended) A method for scanning data utilizing multiple scanning 
engines, comprising: 

(a) receiving data at a gateway; 

(b) generating a request for the data to be scanned for viruses in response to the 
receipt of data at the gateway utilizing a scanning interface; 

(c) translating the request utilizing an engine interface application control 
module coupled between the scanning interface and a plurality of scanning 
engines; 

(d) sending the translated request to the scanning engines utilizing the engine 
interface application control module, the request being adapted for 
prompting the scanning engines to scan the data and respond with events 
upon locating a virus; 

(e) receiving the events utilizing an event processor module coupled to the 
scanning engines and the engine interface application control module; 

(f) checking an integrity of the events received utilizing the event processor 
module; 

(g) translating the events into a common format utilizing the event processor 
module if the events pass the integrity check; 

(h) transmitting the translated events to the engine interface application control 
module; and 

(i) outputting the translated events utilizing the scanning interface; 
wherein the engine interface application control module translates the 

requests and events for each of the scanning engines: 

wherein the scanning engines are unique proprietary scanning engines each 
associated with a different vendor; 



-6- 
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whereiniheregu^^ 
f»m..t different ft""'" formats of th«- other scanning; engines. 

23. (Currently Amended) A method for scanning data utilizing a system capable 
of interfacing multiple scanning engines, comprising: 
identifying a request from a user for data to be scanned for viruses utilizing 

an interface; 

translating the request to be utilized by at least one of a plurality of different 

scanning engines; . 

sending the translated request to the at least one of the scanning engines, die 
request being adapted for prompting the at least one scanning engine to scan the data 
and respond with events upon locating a virus; 

receiving the events from the at least one scanning engine; 

translating the events into a common format; and 

outputting the translated events utilizing the interfacei 
,,^,,Hn th- ^«^^^^tes the requejtand _ eve nr.s for each of the 

scanning e ngines; 

,■1^,,.^^ .u. ...„.in p ...ines are nninue proprietary .r-.nninr engmes ^acl, 
associated with a diffe rent vendor; 

jvhereinjhe_r^^ 
fnrm.t differe- t fr»r^ formats of the other scanning engines. 

24 (Currently Amended) A computer program product for scanning data 
utilizing a system capable of interfacing multiple scanning engines, 

comprising: 

computer code for identifying a request from a user for data to be scanned 

for viruses utilizing an interface; 

computer code for translatirig the request to be utilized by at least one of a 

plurality of different scanning engines; 

computer code for sending the translated request to the at least one of the 
scanning engines, the request being adapted for prompting the at least one scanmng 
engine to scan the data and respond with events upon locating a vims; 

computer code for receiving the events from the at least one scanmng engme; 



-7 - 



. - . ^...c.oToo'.nB - CSID-408 971 4690 " DURATION (inm-ss):04-54 
P.O. 1«16 . RCVOAr 8<3,«004 .-.00:51 PM tEasten, 0.y,.mTln,er SV.:USPT0.ErXRP-1^ 



cuTPr 408 971 46G0 p. 11 

FTug 31- 04 03:09p SVIPG 



computer code for translating the events into a common format; and 
computer code for outputting the translated events utilizing the interfacei 

wVi^rPin the interface translates the r equest and events for each of the 
scanning engines: 

wherein the sca^ ^nin^ en pines are uniq ue propn etary scanning en^nes each 

associated with a different vendor; 

^h^r^iti the request and events fo r each of the scanning engines are in a 
format diffcrf^nt from formats of the other soann inp; engines, 

25. (New) The method as recited in claim 1 , wherein the translation 
involves a table translation. 

26. (New) The method as recited in claim 1, wherein the translation 
involves an algorithmic data interpolation. 

27. (New) The method as recited in claim 1 , wherein different proprietary 
scanning engines are combined into a single product. 
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